CVE-2026-70309

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Scoring

Severity

MEDIUM

CVSS base score

5.4

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

EPSS probability

0.16%

CWE

CWE-346

Published

2026-08-28

Last modified

2026-09-09

Affected products

• Microsoft Microsoft Edge (Chromium-based)

Weakness type

• CWE-346

Related vulnerabilities

• CVE-2026-87563 — Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
• CVE-2026-58649 — .NET Information Disclosure Vulnerability
• CVE-2026-69559 — Microsoft Teams for Android Information Disclosure Vulnerability
• CVE-2026-69680 — Windows DNS Spoofing Vulnerability
• CVE-2026-75156 — Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
• CVE-2026-85152 — undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
• CVE-2026-84482 — WWBN AVideo Cross-Site Request Forgery via get_domain() validation
• CVE-2026-82811 — Toggl OÜ Toggl Track Extension postMessage origin validation

Markdown version · Browse all CVEs